Password verification with password in asp.net using sql server during login

Question

Return successfully

Dim user = "ravi"
        Dim pass = "admin"
        objcmd.CommandText = "Select * from ADMIN_INFO where ADMIN_ID='" & user & "' and ADMIN_PASS='" & pass & "'"

Return successfully

Dim user = "ravi"
        Dim pass = "admin"
        objcmd.CommandText = "Select * from ADMIN_INFO where ADMIN_ID='" & user & "' and ADMIN_PASS='" & pass & "'"

After the query is completed, both return successfully, where, as in the table, only raviand are available admin. So how can I check case sensitivity. Help is needed!

Answer 1

CREATE TABLE #temp
(
    Password Varchar(2)
)
insert into #temp values('a')

First approach

select Password  from #temp Where Password COLLATE Latin1_general_CS_AS  = 'A' 
select Password  from #temp Where Password COLLATE Latin1_general_CS_AS  = 'a' 

Second approach

select Password  from #temp Where cast(Password as varbinary(2))  = cast('A' as varbinary(15)) 
select Password  from #temp Where cast(Password as varbinary(2))  = cast('a' as varbinary(15)) 

---

drop table #temp

Answer 2

This article can help you: Random search in SQL Server queries . However, it is usually not recommended to save passwords in plain text.

, , .Net, .

bool result = string1.Equals(string2); //this is case sensitive unless you specify otherwise